.JPEG)
The Nigeria Police Force (NPF) has announced the arrest of a suspect over his alleged involvement in a cyberattack targeting the database of Microsoft, a multinational technology company.
The suspect, identified as Okitipi Samuel, was arrested following investigations by the National Cybercrime Centre (NCCC) of the Nigeria Police Force.
The Force Public Relations Officer, CSP Benjamin Hundeyin, disclosed this on Thursday, December 18, 2025, while briefing journalists in Abuja on the outcome of the investigation.
According to Hundeyin, the probe was carried out in collaboration with Microsoft, the Federal Bureau of Investigation (FBI), the United States Secret Service, and the United Kingdom’s National Crime Agency.
Investigations revealed that a phishing toolkit known as “Raccoon 0365” was used to create fake Microsoft login portals designed to harvest user credentials. The stolen information was then used to gain unauthorised access to Microsoft 365 email accounts belonging to corporate organisations, financial institutions, and educational establishments across multiple countries.
📰 Latest News Today
Hundeyin explained that between January and September 2025, several incidents of unauthorised access to Microsoft 365 accounts were traced to phishing emails crafted to resemble legitimate Microsoft login pages. These activities resulted in business email compromise, data breaches, and other cyber-enabled fraud.
Following extensive digital forensic analysis and cryptocurrency tracing, police operatives were deployed to Lagos and Edo States, leading to the arrest of three individuals — Joshua, James, and Okitipi Samuel — between September 20 and October 4, 2025.
Searches conducted at their residences led to the recovery of mobile phones, laptops, and other digital exhibits linked to the alleged fraudulent scheme.
Further investigations identified Okitipi Samuel, also known as Moses Felix and “0365,” as the principal suspect and developer of the phishing infrastructure. He was alleged to have operated a Telegram channel used to sell phishing links in exchange for cryptocurrency and hosted fake login pages using stolen or fraudulently obtained email addresses.
The police clarified that Joshua and James were victims of identity theft, as there was no evidence linking them to the creation or operation of the phishing scheme.
Hundeyin said a prima facie case had been established against Samuel, who will be charged under relevant provisions of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2024.
The police assured Nigerians of continued efforts to protect the country’s digital ecosystem and urged citizens to practise good cyber hygiene, including avoiding suspicious links and unsolicited emails.
#Cybercrime #NigeriaPolice #Microsoft #CyberSecurity #BreakingNews #DigitalSafety #NPF